Static task
static1
Behavioral task
behavioral1
Sample
d2fb526d868cb4488157564ae891059160b4349d550a291398b3d48ae28b2681.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d2fb526d868cb4488157564ae891059160b4349d550a291398b3d48ae28b2681.exe
Resource
win10-20240404-en
General
-
Target
d2fb526d868cb4488157564ae891059160b4349d550a291398b3d48ae28b2681
-
Size
3.6MB
-
MD5
df71a06b859776129a744f9dbfddc401
-
SHA1
a8823e2b086fc4c9e5b148ad6cd29f095da05337
-
SHA256
d2fb526d868cb4488157564ae891059160b4349d550a291398b3d48ae28b2681
-
SHA512
76fe69a046f470ca013af39c92a40fff7d6b7a7ad236ea9466d87bbdeac3537d2f1a7544ee5eb1bf179506b780ba0c5fc05f45146befbab12bca1144f21362df
-
SSDEEP
98304:8/uReoGk4cdsOjHE6FDAcKysPL6gUAqsSaYsEHIZwkx:CuReonPdbPFDS9W6+dssIZf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2fb526d868cb4488157564ae891059160b4349d550a291398b3d48ae28b2681
Files
-
d2fb526d868cb4488157564ae891059160b4349d550a291398b3d48ae28b2681.exe windows:6 windows x86 arch:x86
a7b93c85322555ce5149c255418da6de
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
GetWindowRect
gdi32
CreateCompatibleBitmap
advapi32
SystemFunction036
shell32
SHGetFolderPathA
ole32
CoUninitialize
ws2_32
WSACleanup
crypt32
CryptUnprotectData
shlwapi
PathFindExtensionA
gdiplus
GdipSaveImageToFile
setupapi
SetupDiEnumDeviceInterfaces
ntdll
RtlUnicodeStringToAnsiString
Sections
.MPRESS1 Size: 3.5MB - Virtual size: 6.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE